cancel
Showing results for 
Search instead for 
Did you mean: 
  • ×
    Information
    Know the Benefits of your HP account

    Connect with HP support faster, manage all your devices in one place, view warranty information and more– Click Here

    Information
    Fix Windows 10 Update Issues

    Resolve Windows 10 or update issues on HP computer or printer– Click Here

  • post a message
  • ×
    Information
    Know the Benefits of your HP account

    Connect with HP support faster, manage all your devices in one place, view warranty information and more– Click Here

    Information
    Fix Windows 10 Update Issues

    Resolve Windows 10 or update issues on HP computer or printer– Click Here

  • post a message
Highlighted
New member
4 2 0 0
Message 1 of 5
801
Flag Post

HPIA 4.5.4.1 Offline Mode require write access

HP Recommended
Microsoft Windows 10 (64-bit)

Hello,

 

HPIA's offline mode is a major improvement.
However, it requires write access to the repository which is not suitable from a security point of view.
Is a corrected version planned soon? (or beta version?)

 

Thanks for your help.

4 REPLIES 4
Highlighted
New member
3 3 0 0
Message 2 of 5
Flag Post
HP Recommended

At least for me, it´s not just a security concern, is a pure functionality problem, since in my corporative environment it´s not possible to Write in a Share from a SYSTEM account.

TaskScheduled running as "NT AUTHORITY\SYSTEM"
HPIA /Debug:
Exception (Handled): Denied Access to the path `\\MyServerFQDN\DriverStore\Hp\ProDesk600G2\.repository\cache\offline\platformList.cab´

Exception (Handled): Denied Access to the path `\\MyServerFQDN\DriverStore\Hp\ProDesk600G2\.repository\cache\offline\8169_64_10.0.1803.cab´

 

It refers to two cab files, wich are essentially a zipped file and from my point of view, seems to me like it´s trying to unzip both in the UNC path, instead of download them locally, unzip and read them there, where a system account can interact always with the fileSystem without restrictions.
That´s a poor behaviour for an Enterprise target designed tool.

Any Workaround? Please ASAP!

0 Kudos
Highlighted
New member
3 3 0 0
Message 3 of 5
Flag Post
HP Recommended

Take this into account...

That´s the seen behaviour, even if I define the parameters "/SoftpaqExtractFolder:C:\HPIA\DOWNLOADS\EXTRACT" & "/SoftPaqDownloadFolder:C:\HPIA\DOWNLOADS"

0 Kudos
Highlighted
Author
New member
4 2 0 0
Message 4 of 5
Flag Post
HP Recommended

During my tests, I used ProcMon.
At different times, the program first requests read access to the cab files, then a second request for writing.
It's this second request who fail.
By giving the necessary rights, there is never write to the shared folder. So write access requests have to be replaced by read access requests and everything should work as expected.

0 Kudos
Highlighted
New member
3 3 0 0
Message 5 of 5
Flag Post
HP Recommended

Thanks for sharing that info with us. So now it´s clear like a sunny day.
If it request write, but finally don´t write anything, seems to me like at a Beta development point that function was retired for obvious reasons, but maybe somethings remains somewhere like an annoying appendix.
I´m reporting this also at...
https://developers.hp.com/hp-client-management/forum/questions-about-hpiascriptlibrary-offlinemode#c...

So I can live with that behaviour, but my primary issue is...
It´s not working even if I set requeried permissions to "Domain Computers" or "everyone" or "anonymous logon" at both, NTFS and Share permissions level. When I trigger HPIA with a scheduled task running as SYSTEM account, always fail with an Access Denied error.
So I´m stuck and I need to make it work.

0 Kudos
Warning Be alert for scammers posting fake support phone numbers and/or email addresses on the community. If you think you have received a fake HP Support message, please report it to us by clicking on "Flag Post".
† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation